General
-
Target
c867bf97cfbe1cd0ed5bd46d2c4dda1e450007b31a126b5aa7ac841be946960cN.exe
-
Size
58KB
-
Sample
241118-wcvvna1gna
-
MD5
3b789e2a298f40b417b9bb351fdfce40
-
SHA1
17925ce0a373d7d8bacb68641e29bbaa37c7e0ba
-
SHA256
c867bf97cfbe1cd0ed5bd46d2c4dda1e450007b31a126b5aa7ac841be946960c
-
SHA512
c7e2ce2a6d1f46d5a6d5d664bbc583b458ba2f8cb3ea97e5ba193eace50ce8bf266973c795f5ebd692f17f9bf393b194a50a5f3a9aaefaf11d2edbb5034ef29a
-
SSDEEP
1536:amZ+4hcuX5uZ79jmvFQTXnz9yQ/PFBhl1lg:amZ+luXwy2f9LDhDlg
Static task
static1
Behavioral task
behavioral1
Sample
c867bf97cfbe1cd0ed5bd46d2c4dda1e450007b31a126b5aa7ac841be946960cN.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.47.76
218.54.47.77
218.54.47.74
Targets
-
-
Target
c867bf97cfbe1cd0ed5bd46d2c4dda1e450007b31a126b5aa7ac841be946960cN.exe
-
Size
58KB
-
MD5
3b789e2a298f40b417b9bb351fdfce40
-
SHA1
17925ce0a373d7d8bacb68641e29bbaa37c7e0ba
-
SHA256
c867bf97cfbe1cd0ed5bd46d2c4dda1e450007b31a126b5aa7ac841be946960c
-
SHA512
c7e2ce2a6d1f46d5a6d5d664bbc583b458ba2f8cb3ea97e5ba193eace50ce8bf266973c795f5ebd692f17f9bf393b194a50a5f3a9aaefaf11d2edbb5034ef29a
-
SSDEEP
1536:amZ+4hcuX5uZ79jmvFQTXnz9yQ/PFBhl1lg:amZ+luXwy2f9LDhDlg
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-